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IN TWF rT ATTVISr 

A status of all the claims of the present Application is presented below: 

1 . (Original) A method of analyzing frames at a node of a network by an intrusion 
prevention system executed by the node, comprising: 

reading the frame by the intrusion prevention system; 

comparing the frame with a machine-readable signature file; 

determining the frame has a frame signature that corresponds with the machine- 
readable signature file; and 

determining the machine-readable signature file has an associated squelch comprising 
a squelch threshold and a squelch period. 

2. (Original) The method according to claim 1, fiirther comprising disabling 
execution of a directive of the machine-readable signature file if a frame comiter exceeds the 
squelch threshold. 

3. (Original) The method according to claim 1, fiirther comprising incrementing a 
frame counter upon determination that the frame signature corresponds with the machine- 
readable signature. 

4. (Original) The method according to claim 1, fiirther comprising determining 
whether the squelch period has elapsed. 

5. (Original) The method according to claim 4, fiirther comprising initiating a new 
squelch period upon determining the squelch period has elapsed. 

6. (Original) The method according to claim 3, fiirther comprising determining if the 
squelch threshold has been exceed by the frame counter. 
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7. (Original) The method according to claim 1, further comprising executing a 
directive of the machine-readable signature file upon determination that the squelch threshold 
has not been exceeded. 

8. (Original) The method according to claim 1, further comprising suppressing 
execution of a directive of the signature file upon determination that the squelch threshold has 
been exceeded. 

9. (Original) The method according to claim 8, wherein suppressing execution of a 
directive of the signature file fiirther comprises suppressing execution of report generation 
associated with the determination that the firame signature corresponds with the machine- 
readable signature file. 

10. (Original) A computer-readable medium having stored thereon a set of 
instmctions to be executed, the set of instructions, when executed by a processor, cause the 
processor to perform a computer method of: 

reading a fi-ame; 

comparing the fi-ame with a machine-readable signature file; 

determining the fi-ame has a fi-ame signature that corresponds with the machine- 
readable signatvire file; and 

determining the machine-readable signature file has an associated squelch comprising 
a squelch threshold and a squelch period. 

11. (Original) The computer readable medium according to claim 10, fiirther 
comprising a set of instruction that, when executed by the processor, cause the processor to 
perform a computer method of periodically incrementing a squelch period timer assigned to 
the machine-readable signature file. 

12. (Original) The computer readable medium according to claim 1 1, fiirther 
comprising a set of instructions that, when executed by the processor, cause the processor to 
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perform a computer method of determining if the squelch period timer equals or exceed the 
squelch period. 

13. (Original) The computer readable medium according to claim 12, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of: 

re-initiating the squelch period timer upon determination that the squelch period timer 
equals or exceeds the squelch period; and 

incrementing a frame counter upon determining the frame signature corresponds with 
the machine-readable signature file. 

14. (Original) The computer readable medium according to claim 12, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of determining if a frame coimter exceeds the squelch threshold. 

15. (Original) The computer readable mediiun according to claim 14, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of suppressing execution of a directive of the signature file upon 
determination that the squelch threshold has been exceeded by the frame coimter. 

16. (Original) The computer readable medium according to claim 14, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of executing a directive of the signature file upon determination 
that the squelch threshold has not been exceeded by the frame counter. 

17. (Original) The computer readable medium according to claim 15, wherein 
suppressing execution of a directive further comprises suppressing execution of a report 
generation associated with the determination that the frame signature corresponds with the 
machine-readable signature file. 
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18. (Original) The computer readable medium according to claim 13, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of determining if the squelch is enabled. 

19. (Original) The computer readable medium according to claim 13, further 
comprising a set of instructions that, when executed by the processor, cause the processor to 
perform a computer method of executing a directive of the signature file upon determining 
the squelch is disabled. 
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